Submit a ticketCall us

Quickly Address Software Vulnerabilities
Patch Manager is an intuitive patch management software which extends the capabilities of WSUS and SCCM to not only patch Windows® servers and workstations, and Microsoft® applications, but also other 3rd-party applications which are commonly exploited by hackers. Learn More.

 

Home > Success Center > Log & Event Manager (LEM) > Manage the LEM Database and required storage space

Manage the LEM Database and required storage space

Created by Tim Rush, last modified by Steve.Hawkins on Aug 30, 2016

Views: 269 Votes: 3 Revisions: 23

Overview

The LEM database is self-managed by the application. Once the database has consumed up to 90% of available storage space, the oldest events are overwritten.

Environment

LEM version 5.6 and later

Detail

LEM is a network appliance, virtualized for ease of management, and requires a minimum of 250GB of storage space. When log retention time needs to be increased, LEM size can be increased to 2.0 TB in versions 5.6.x through 6.3.x.

Database size

The database is contained within the LEM virtual machine, with no option for an external database. By default the database size will consume 90% of the available storage space (after operating system and application requirements).

Retention period

Where auditing requirements require a specific retention period for logs, LEM chooses to use 'size'. To calculate the retention period, launch the Database Maintenance Report (DBM) or create a scheduled weekly or monthly report for this. The report will display "Database Time Span (days)" for the retention period, but storage space consumed must also be checked.

If the DBM shows a Time Span of 90 days and the database has consumed 45% of the available storage space, the retention period is 180 days (6 months).

If the DBM shows a Time Span of 90 days and the database has consumed all 90% of the available storage space, the retention period is 90 days.

If auditing requires a retention period of 180 days (6 months), the DBM shows a Time Span of 90 days, and the database consumes all 90% of the available storage, the LEM size needs to be doubled. See Resize a LEM virtual appliance for more information.  

 

Last modified
15:06, 30 Aug 2016

Tags

Classifications

Public